Complete (undebugged) port of the prepare-for-spec routine into LLPE proper.

Next up: debugging existing features, adding support for cross-branching on tentative loads, tentative reads, function path conditions and at the start.